Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2025-30640HIGHA link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected instEPSS 0.2%CVE-2025-63945HIGHA privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute EPSS 0.2%CVE-2026-26225HIGHIntego Personal Backup Task File Privilege EscalationEPSS 0.2%CVE-2025-63946HIGHA privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execEPSS 0.2%CVE-2026-23893MEDIUMopenCryptoki has improper link resolution before file access (link following)EPSS 0.2%CVE-2026-88016HIGHrclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destinationEPSS 0.2%CVE-2023-41971MEDIUMWindows ZCC Upgrade DoS And Privilege Escalation Through RPC ControlEPSS 0.2%CVE-2025-15310HIGHTanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.EPSS 0.2%CVE-2025-15319HIGHTanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.EPSS 0.2%CVE-2026-66153HIGHThe NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to maniEPSS 0.2%CVE-2026-35349MEDIUMuutils coreutils Path-Based Safety Bypass with --preserve-rootEPSS 0.2%CVE-2026-54230HIGHAbrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesEPSS 0.2%CVE-2026-58203MEDIUMNestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_sizeEPSS 0.2%CVE-2024-0206HIGH A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local uEPSS 0.2%CVE-2022-42292MEDIUM NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create aEPSS 0.2%CVE-2023-28141MEDIUMNTFS JunctionEPSS 0.2%CVE-2026-56236MEDIUMCapgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential OperationsEPSS 0.2%CVE-2025-15318MEDIUMTanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.EPSS 0.2%CVE-2026-82049HIGHtarfile extraction filters allow file modification and content disclosure via hard link to symlinkEPSS 0.2%CVE-2025-52936CRITICALImproper Link Resolution Before File Access vulnerability in yrutschle/sslhEPSS 0.2%